46 matches found
react2shell
React2Shell - إثبات مفهوم استغلال CVE-2025-55182 أداة استغلال إثبات مفهوم لثغرة CVE-2025-55182، وهي ثغرة حرجة في تنفيذ التعليمات البرمجية عن بُعد داخل تطبيقات Next.js التي تستخدم React Server Components. ⚠️ إخلاء المسؤولية هذه الأداة مخصصة للاختبارات الأمنية التعليمية والمصرح بها فقط. ❌ لا تستخدمه...
NextRce
NextRce - Next.js RSC शोषण उपकरण CVE-2025-55182 Next.js App Router के लिए उन्नत भेद्यता स्कैनर और शोषक द्वारा विकसितMitsec 🔥 नई सुविधा: WAF बायपास मोड UTF-16LE childprocess या execSync जैसे कीवर्ड वाले मानक पेलोड अक्सर Web Application Firewalls WAFs द्वारा अवरुद्ध कर दिए जाते हैं। NextRCSWaff.py ...
RSC_Detector
Détecteur d’empreintes RSC Une extension Chrome pour détecter les empreintes des composants serveur React RSC et du routeur App Router de Next.js sur les pages web. ⚠️ Avis important Cette extension est conçue uniquement à des fins éducatives et de recherche en sécurité. Elle inclut des...
CVE-2025-55182-Exploit-extension
RSC Fingerprint Detector A Chrome extension for detecting React Server Components RSC and Next.js App Router fingerprints on web pages. ⚠️ Important Notice This extension is intended for educational and security research purposes only. It includes functionality that may be used to test for...
CVE-2025-55182-Exploiter
🛡️ RSC Sentinel Pro Auditeur avancé des composants serveur React RSC et boîte à outils d'exploitation CVE-2025-55182 🔥 Détecter. Empreinte. Exploiter. Une extension Chrome pour les chercheurs en sécurité et les chasseurs de bugs ciblant les vulnérabilités RSC de Next.js App Router — en particulier...
React2Shell
RSC Sentinel Une extension Firefox pour détecter les vulnérabilités React2Shell CVE-2025-55182 & CVE-2025-66478 dans les applications web. 👁️ Aperçu RSC Sentinel est une extension de navigateur Firefox destinée aux chercheurs en sécurité et aux éducateurs qui souhaitent observer les indicateurs...
EUVD-2026-70268
A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the function request.text/req.json of the file apps/rowboat/app/api/composio/webhook/route.ts of the component Composio Webhook Endpoint. The manipulation results in denial of service. It is possible to launc...
RSC-Infra-Scanner
RSC इन्फ्रा स्कैनर rscinfrascan.py एक तेज़, अतुल्यकालिक Python उपकरण है जो डोमेन के लिए संभावित Next.js App Router / React Server Components RSC बुनियादी ढांचे की पहचान करता है। यह किसी भी कमजोरी का शोषण नहीं करता। यह केवल निष्क्रिय HTTP/HTML/हेडर फिंगरप्रिंटिंग करता है ताकि आप उन लक्ष्यों की पहच...
cve-2025-55182-lab
مختبر RSC CVE-2025-55182 قابل للاختراق عمدًا مختبر Docker محلي للبحث الأمني المصرح به: مكونات خادم React / موجه تطبيق Next.js مع حزمة في النطاق المتأثر بـ CVE-2025-55182 React2Shell. استخدمه فقط على جهازك الخاص. لا تعرض هذه الحاوية للإنترنت. المراجع React — ثغرة أمنية حرجة في مكونات خادم React NV...
CVE-2025-55182_CVE-2025-66478
CVE-2025-55182 - Esecuzione Remota di Codice nei Server Components di Next.js/React Panoramica Questo repository contiene un exploit Proof-of-Concept PoC per CVE-2025-55182, una vulnerabilità critica di Esecuzione Remota di Codice RCE che interessa i Server Components di React nelle versioni 19.x...
EUVD-2026-49382
Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. This issue h...
GHSA-4C39-4CCG-62R3 Next.js: Unbounded Server Action payload in Edge runtime
Impact Requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the Edge runtime Workarounds If you cannot upgrade, ensure your hosting provider limits the request's body size. 5 MiB should be...
Next.js: Unauthenticated disclosure of internal Server Function endpoints
Impact In Next.js applications using App Router, Server Actions use server or use cache endpoints can be disclosed bypassing any authentication on the pages where these endpoints are usually used. Server Action IDs can be disclosed to unauthenticated users via publicly served client artifacts for...
GHSA-6GPP-XCG3-4W24 Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
Impact Crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. Workarounds If you cannot upgrade immediately, enforce authorization in the page's server-side data path instead...
NPM: Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
NPM: Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale vulnerability discovered by ? in WordPress Npm next versions = 16.0.0, 16.2.11...
Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
Impact Crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. Workarounds If you cannot upgrade immediately, enforce authorization in the page's server-side data path instead...
GHSA-M99W-X7HQ-7VFJ Next.js: Denial of Service in App Router using Server Actions
Impact Crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further requests in the same process. Workarounds No workaround exists besides upgrading. Applications using Pages Router or not using...
PT-2026-63558
Name of the Vulnerable Software and Affected Versions Next.js versions 12.0.0 through 15.5.20 Next.js versions 16.0.0 through 16.2.10 Description Applications using App Router, Server Actions use server, or use cache endpoints may disclose these endpoints, bypassing authentication on the pages...
PT-2026-63556
Name of the Vulnerable Software and Affected Versions Next.js versions 13.0.0 through 15.5.20 Next.js versions 16.0.0 through 16.2.10 Description Crafted requests targeting applications using App Router with at least one Server Action can cause excessive CPU usage, which blocks the processing of...
